RegScale is a continuous controls monitoring (CCM) platform purpose-built to deliver fast and efficient GRC outcomes. We help organizations break out of the slow and expensive realities that plague legacy GRC tools by bridging security, risk, and compliance through controls lifecycle management. By leveraging CCM, organizations experience massive process improvements like 90% faster certification times, and 60% less audit prep time. Today’s expansive security and compliance requirements can only be met with a modern, CCM based approach, and RegScale is the leader in that space.
The Role:
RegScale is seeking a Senior Software Engineer, Integrations to design and build integrations that connect RegScale with the security, engineering, and business tools our customers rely on daily. You'll architect scalable integration patterns, build robust APIs and connectors, and ensure seamless data flow between RegScale and platforms like vulnerability scanners, cloud security tools, SIEM systems, and ticketing platforms.
You'll tackle challenges like synchronizing millions of security findings while maintaining data integrity, building resilient integrations that handle rate limits and eventual consistency, and designing schema-agnostic data models that work across diverse vendor APIs. Success in this role means building systems with high reliability, fast data synchronization, and reusable frameworks that accelerate future integration development.
What You'll Build:
- Scalable integration platform: Design and build an event-driven integration framework connecting RegScale with external platforms, including vulnerability scanners, SIEM/SOAR tools, cloud security platforms, ticketing systems, and identity providers
- Real-time data pipelines: Create intelligent ingestion systems that normalize, enrich, and contextualize security data from disparate sources, handling high-velocity events and optimizing for both throughput and cost
- Modern API infrastructure: Build robust REST APIs, implement webhook architectures, design OAuth/OIDC flows, and ensure resilient handling of API changes and massive data volumes
- Reusable integration frameworks: Develop SDKs, templates, and patterns that cut integration development time in half while enabling both internal teams and customers to build custom connectors
- Enterprise-grade reliability: Implement comprehensive monitoring, alerting, data quality checks, and zero-touch deployments with automated testing across all integration touchpoints
- Work with Product Management to translate integration requirements and use cases into technical solutions
- Partner with customers and internal teams to understand external system behaviors, data models, and constraints
- Ensure data quality, consistency, and performance across integrated systems
- Build reusable frameworks and patterns to accelerate the development of future integrations
- Write clean, well-tested, and well-documented code
- Troubleshoot and resolve integration issues across distributed systems
- Contribute to engineering best practices, code reviews, and technical mentorship
Requirements
- 6+ years of professional software engineering experience
- Expert-level understanding of API design patterns (REST, GraphQL, webhooks, SSE/WebSockets)
- Strong foundation in distributed systems, event-driven architectures, and asynchronous processing
- Proficiency in modern backend languages (C#, Go, Python, Node.js, or similar) with demonstrated ability to pick up new tech quickly
- Hands-on experience with cloud platforms (AWS/Azure/GCP) and infrastructure-as-code
- Deep knowledge of data modeling, ETL/ELT patterns, and data consistency strategies
- Experience with message queues, streaming platforms (Kafka, Kinesis, Pub/Sub), and workflow orchestration
- Strong problem-solving skills and comfort working in ambiguous problem spaces
- Ability to think systemically about data flow and integration architecture
- Ownership mentality—you take responsibility from design through production
- Strong collaboration and communication skills
Nice to Have
- Experience integrating with security or DevOps tools (e.g., vulnerability management, cloud security, CI/CD, ticketing systems)
- Familiarity with tools such as Wiz, Tenable, Jira, or similar platforms
- Experience building production software with deep experience in integration architecture supporting event-driven or streaming data integrations
- Background working with regulated or compliance-focused platforms
